Global Security Mag Online: In 2013 web application vendors patch security vulnerabilities within 3 weeks on average

In Q1 and Q2 of 2013 Cross-Site Scripting (XSS) was the most common vulnerability in web applications, SQL Injection took the second place, and Cross-Site Request Forgery the third one. During this period of time 65% of discovered vulnerabilities had medium risk, 20% had high risk. 95% of vendors released security patches before public disclosure of vulnerabilities. On average, vendors released security patches within 3 weeks after they were notified about discovered vulnerabilities. Read more at globalsecuritymag.com

Computer Business Review: Cross-Site Scripting most vulnerable among web apps

Cross-Site Scripting (XSS) was the most common vulnerability in web applications found during the first half of 2013, followed by SQL Injection and Cross-Site Request Forgery, a new report has found. Read full article: cbronline.com.

Help Net Security: Vendors patch security vulnerabilities within 3 weeks

High-Tech Bridge Security Research Lab released its statistics on web application security for the first half of 2013. The statistics is based on HTB Security Advisories that are released on a weekly basis and cover 73 vulnerabilities in open source web applications which names are quoted at least 50’000 times in Google. Read more at net-security.org.

Infosecurity: Complex Coding Makes Web Apps a Bit Safer

Malware and internet-based attacks continue to escalate in both volume and complexity, but when it comes to web application security, critical-level risk appears to be in the minority thanks to the convoluted code that most apps run on. Read more at infosecurity-us.com.

High-Tech Bride Named a Top Trusted Website in OTA's 2013 Online Trust Honor Roll

High-Tech Bridge SA announced it has been named to the Online Trust Alliance (OTA) 2013 Online Trust Honor Roll for demonstrating exceptional data protection, privacy and security in an effort to better protect their customers and brand. For High-Tech Bridge this is a second consecutive nomination for this prestigious global award that the company has already received in 2012.

OTA, a nonprofit organization that works collaboratively with industry leaders to enhance online trust, completed comprehensive audits analyzing more than 750 domains and privacy policies, approximately 10,000 web pages and more than 500 million emails for this report. The composite analysis included over a dozen attributes focusing on:

1. Site & server security,
2. Domain, brand, email and consumer protection,
3. Privacy policy and practices.

In addition to the in-depth analysis of their web sites, Domain Name Systems (DNS), outbound emails, and public records were analyzed for recent data breach incidents and FTC settlements. Key sectors audited include the Internet Retailer 500, FDIC 100, Top 50 Social Sites as well as OTA members.

"Consumers are trading billions of pieces of personal data in exchange for desired services and are relying on the integrity of businesses collecting and storing that information to protect them,” said Craig Spiezle, president and executive director of Online Trust Alliance. “As a 2013 Honor Roll Recipient, High-Tech Bridge has demonstrated excellence in leadership and commitment to protecting consumers and building trust through data protection, security, and privacy."

"At High-Tech Bridge we are honored to receive the OTA Online Trust Honor Roll award. Being a member of OTA Advisory Council our company shares the values and objectives promoted by Online Trust Alliance, such as global trust and security in the cyber space," said Ilia Kolochenko, CEO of High-Tech Bridge. "We are committed to support OTA projects and initiatives, and this year we are especially proud that our new product ImmuniWeb® was used by OTA during Honor Roll scoring."

Being named to the 2013 Honor Roll is a significant achievement considering the large number of companies that received failing marks for inadequate domain and consumer protection (14%), insecure websites (7%), and inadequate privacy policies or data collection practices (36%).

About The Online Trust Alliance
The Online Trust Alliance (OTA) is a non-profit with the mission to enhance online trust, while promoting innovation and the vitality of the internet. Our goal is to help educate businesses, policy makers and stakeholders while developing and advancing best practices and tools to enhance the protection of users' security, privacy and identity. OTA supports collaborative public-private partnerships, benchmark reporting, meaningful self-regulation and data stewardship.

About High-Tech Bridge
High-Tech Bridge SA is a leading provider of information security services, such as penetration testing, network security auditing, consulting and computer crime forensics. In 2012 Frost & Sullivan has recognized High-Tech Bridge as one of the market leaders and best service providers in the ethical hacking industry. High-Tech Bridge devotes significant resources to information security research. High-Tech Bridge Security Research Lab helped various software vendors improving security of their products, including such vendors as Microsoft, IBM, Novell, McAfee, Sony, HP, Samsung, OpenOffice, Corel, OpenX, Joomla, WordPress, UMI.CMS, and hundreds of others.

Contact Information:
High-Tech Bridge SA
Mr. Patrick Tran
+41 22 560 68 43
www.htbridge.com

High-Tech Bridge: sponsor at Black Hat Europe 2013

High-Tech Bridge announced sponsorship at Black Hat Europe 2013. This Informaton Security professionals conference will take place in Amsterdam on March (from 12th to 15th), 2013 in the NH Grand Hotel Krasnapolsky in Amsterdam, The Netherlands.

Black Hat Briefings description from Wikipedia:

The Black Hat Briefings is a computer security conference that brings together a variety of people interested in information security. Representatives of federal agencies and corporations attend along with hackers. The Briefings take place regularly in Las Vegas, Barcelona (previously Amsterdam) and Tokyo. An event dedicated to the Federal Agencies is organized in Washington, D.C.

Black Hat was founded in 1997 by Jeff Moss, most famous for creating the Black Hat and DEF CON, which are considered the premier information Security conferences in the world, Black Hat 2009 hosting 4,000 digital experts and professionals. Black Hat started as a single annual conference held yearly in Las Vegas, and is now held in multiple locations around the world.

New members in High-Tech Bridge's Advisory Board

High-Tech Bridge announces new Advisory Board members:

• Craig Spiezle
• Anuj Singh
• Jake Kouns
• Brian Martin
• Philippe Meyer

Their outstanding expertise and unique experience in the information security and business development will bring an sovereign and unbiassed assessment of High-Tech Bridge development and tactics to ensure the maximal level of information security services offered by High-Tech Bridge.

The Ethical Hacker Network: Interview of Ilia Kolochenko

The Ethical Hacker Network (Donald C. Donzal, Editor-In-Chief) interviewed Ilia Kolochenko, CEO of High-Tech Bridge about penetration testing, Web Applications Security, Vulnerability Research and more: Interview: Ilia Kolochenko, CEO of High-Tech Bridge.

Ilia Kolochenko at invest'11.

High-Tech Bridge to Partner with Open Security Foundation

High-Tech Bridge is pleased to announce its partnership with the Open Security Foundation (OSF) and Open Security Vulnerability Database (OSVDB) in particular.

Ilia Kolochenko, CEO of High-Tech Bridge, says, "At High-Tech Bridge, we are pleased to welcome the founders of OSF, Jake Kouns and Brian Martin to our Advisory Board. Their unique experience and competence in vulnerability research and management will be extremely useful in advising our company. Strong technical collaboration between High-Tech Bridge Research Lab, which has obtained both CVE and CWE Compatible statuses this year, and OSVDB shall be fruitful for both the information security and vulnerability research communities. In the near future we are also planning to collaborate in the domain of vulnerability research leveraging our new SaaS ImmuniWeb®, to be launched on the 15^th of January 2013 in a Beta mode."

Brian Martin, President and COO of Open Security Foundation, adds, "High-Tech Bridge has shown serious dedication to providing pro bono vulnerability research for hundreds of software vendors, as well as constantly enhancing their vulnerability research and disclosure process. This drive for maintaining high standards is exactly what the OSF looks for in the industry."

About High-Tech Bridge

High-Tech Bridge SA provides companies and international organizations with cutting-edge information security services, such as penetration testing and computer crime investigations. High-Tech Bridge was recognized as one of the market leaders and best service providers in the ethical hacking industry according to Frost & Sullivan's market research conducted in 2012.

About Open Security Foundation

Open Security Foundation (OSF) is a 501(c)(3) non-profit public organization founded and operated by information security enthusiasts. Open Security Foundation provides independent, accurate, detailed, current, and unbiased security information. Open Security Foundation runs the Open Source Vulnerability Database (OSVDB), the DataLossDB, and other projects. OSVDB currently covers over 87,000 vulnerabilities, spanning over 59,000 products.

Contact
Mr. Sebastien Flaccavento
Tel.: +41-22-560-68-43
E-Mail: press (at) htbridge.com

Web Applications Vulnerabilities CVSSv2 Calculator

High-Tech Bridge is pleased to announce CVSSv2 Calculator for vulnerabilities in web applications.

The Common Vulnerability Scoring System (CVSS) provides an open framework for communicating the characteristics and impacts of IT vulnerabilities.

Read more: A Complete Guide to the Common Vulnerability Scoring System Version 2.0.

High-Tech Bridge to Announce ImmuniWeb® for its Fifth Anniversary

High-Tech Bridge is pleased to celebrate its fifth anniversary on December 12, 2012. We are grateful to all the customers for their loyalty and trust. On this remarkable date, High-Tech Bridge is also proud to partially uncover its innovative in-house product named ImmuniWeb®, expected by many customers, partners and journalists for almost one year.

Ilia Kolochenko, CEO, briefs about it:

"Our fifth year of continuous growth proves that we are doing the right thing and our business strategy is correct. Finally, we are ready to launch ImmuniWeb®, a product that is aimed to change our market towards simplicity, integrity and accessibility for Small and Medium Businesses, who were unfairly prevented from testing their security by high market prices and administrative difficulties. We have invested several million dollars and almost 3 years into its development, and now we are ready to present it to the public. The official sales of ImmuniWeb® Beta will start on the 15^th of January 2013 for all the customers in Switzerland, and for the holders of invite-codes abroad. Later the product will be available worldwide without limitations. We have already registered the trademark in 36 countries. For the moment that's all I can say about ImmuniWeb®, more information is coming soon. Stay with us."

High-Tech Bridge will offer special discounts for ImmuniWeb® to all its customers. If you are located abroad please contact your High-Tech Bridge's Account Manager by e-mail to get an invite-code.

About High-Tech Bridge
High-Tech Bridge SA provides multinational companies, financial institutions, and international organizations with edge-cutting information security, penetration testing and ethical hacking services. In 2012 Frost & Sullivan's market research has recognized High-Tech Bridge as one of the market leaders and best service providers in the ethical hacking.

Contacts
Mr. Sebastien Flaccavento
Tel.: +41-22-560-68-43
E-Mail: press@htbridge.com

Web: https://www.htbridge.com

Twitter: https://twitter.com/htbridge

Facebook: https://www.facebook.com/htbridge

More photos of High-Tech Bridge's office: our racks

In continuation of previous post High-Tech Bridge office photos became available more pictures.

All other photos and events you can see here: High-Tech Bridge on Facebook.

Online Trust Alliance (OTA) Gold Sponsor

Not so long ago, High-Tech Bridge has joined to the Online Trust Alliance (OTA) as a Gold Sponsor and Advisory Council member. Also, like High-Tech Bridge, the list includes organizations like AllClear ID, Epsilon, Internet Identity, LashBack, Microsoft, Pitney Bowes, PricewaterhouseCoopers, Secunia, Verisign.
The whole list: OTA Gold Sponsors - Advisory Council.

High-Tech Bridge Continues Expansion and Prepares Innovative Product Announcement Shortly

High-Tech Bridge is pleased to announce share capital increase to 4M CHF. New funding will be mainly used to finish an innovative in-house security product development, announcement of which will be done in the near future. For the moment the product is passing pre-final internal testing phase.

Ilia Kolochenko, CEO, summarizes the corporate course of 2012: "At High-Tech Bridge, 2012 was a year of several significant achievements. First of all, our organic growth, stable development and permanent internal perfection processes were recognized by Frost & Sullivan, who nominated High-Tech Bridge as one of the market leaders and best service providers in the ethical hacking industry in April.

Secondly, in June High-Tech Bridge has been named to the Online Trust Alliance (OTA) 2012 Online Trust Honor Roll. Designed to recognize leadership, the Honor Roll distinguishes High-Tech Bridge as a "North Star" to inspire others.

Thirdly, our proprietary Security Research Lab has successfully obtained both CVE® and CWE® compatibility status that assures the highest quality of our research. We were investing and we will continue investing into Research and Development, as we consider innovation as one of the most important factors to assure the best quality of service for our customers.

We also managed to reinforce considerably our technical team with new experts. Therefore in August we doubled our office space and we expect to increase it even more before the end of the year, staying at World Trade Center Geneva. In October we have successfully passed our yearly ISO 27001 audit by SGS.

High-Tech Bridge's main priority is customer satisfaction. We thank all our customers for loyalty and trust, and we will do our best to continue delivering cutting-edge ethical hacking and computer forensics services in the future. Our new product, that is currently being tested, is also aimed to deliver the highest level of satisfaction to the customers of its niche."

We remind that during this week High-Tech Bridge's team will be pleased to meet you at Gartner's Symposium ITxpo 2012 in Barcelona, where High-Tech Bridge is a speaker and exhibitor. We also look forward seeing you at ISACA's "Information Security Day" in February 2013 taking place in Luxembourg, where High-Tech Bridge is a Gold Sponsor and speaker for two security talks.

Contact
Sebastien Flaccavento
Senior Project Manager

High-Tech Bridge SA
Public and Press Relations
+41-22-560-68-43
E-mail: press (at) htbridge.com
https://www.htbridge.com

Source: High-Tech Bridge continues expansion and prepares innovative product announcement shortly.

ISACA's Information Security Day: High-Tech Bridge as Gold Sponsor and Speaker

High-Tech Bridge, Information Security Company, is Gold Sponsor and Speaker on "Information Security Day" organized by ISACA®. Conferences to hold:

• Manipulating Memory for Fun and Profit

The event will take place on the 6-7 of February 2013 in Luxembourg.

Video: The Growing Hacking Threat to Websites: An Ongoing Commitment to Web Application Security

Watch "The Growing Hacking Threat to Websites: An Ongoing Commitment to Web Application Security" video on Youtube:

Links:

• htbridge.com/websecurity
• Video on YouTube
• Publication on our blog

How to Secure Your Digital Assets in the Era of Cyber War (October, 16)

High-Tech Bridge Annual Conference

Date:	16 October 2012
Venue:	Crowne Plaza Hotel, Geneva, Switzerland

Businesses of all sizes are embracing new approaches to IT (such as cloud computing, virtualisation, BYOD and BPO), making them more and more dependent upon their IT infrastructure. This dynamic IT environment stimulates hackers, and organisations face increasingly targeted and sophisticated attacks. The attackers range from individual "hacktivists" to organised crime rings and totalitarian nation-states. Many hackers are highly organised and skilled.

Despite the prevalence of firewalls, IDS/IPS, encryption and other security measures, many organisations continue to fall victim to hacking attacks due to configuration errors or inadequate security solutions. As a result, companies are beginning to recognise the importance of regular security audits, because human experience and analysis are essential to the maintenance of a strong network security perimeter.

To raise awareness of the threat facing all types of organisations, High-Tech Bridge organises its annual conference entitled "How to Secure Your Digital Assets in the Era of Cyber War". The conference will take place on Tuesday, 16 October 2012, at Crowne Plaza Hotel, Geneva.

Frost & Sullivan Principal Alexander Michael will be speaking at the conference with the following presentation: "Ethical Hacking: Why it is a Business Investment, not a Cost".

For additional information about the event, please follow the link: https://www.htbridge.com/events/high_tech_bridge_annual_conference_2012.html

If you would like to obtain Mr Michael's presentation or receive Frost & Sullivan's two recent security whitepapers, please contact Joanna Lewandowska, Corporate Communications, at joanna.lewandowska (at) frost.com.

Source: How to Secure Your Digital Assets in the Era of Cyber War (frost.com)

4 out of 5 websites are vulnerable

Four out of Five Sites are Vulnerable, says Herald Online in article about Web Application Security.

Frost & Sullivan's recent White Paper (WP) discusses the growing threat to web applications putting it into its right business context. Describing the mysterious world of web applications hacking, the paper gives also an overview of the likely victims and outlines what are the solutions for organisations to protect themselves. The paper benefits from the insight and experience of leading security companies and organizations, like MITRE , High-Tech Bridge , and Online Trust Alliance (OTA), who have provided excellent support to Frost & Sullivan during the WP review.

Read more here: http://www.heraldonline.com/2012/09/05/4236143/web-application-security-is-an.html

Related links:

• Frost & Sullivan Whitepaper
• High-Tech Bridge security publication
• Post on htbridge.blogspot.com

The Growing Hacking Threat to Websites: An Ongoing Commitment to Web Application Security

September 5, 2012 Frost & Sullivan has published a whitepaper, called "Web Application Security is an On-going Commitment due to Highly Dynamic Hacking Risks".

Frost & Sullivan, High-Tech Bridge, MITRE and OTA: The Growing Hacking Threat to Websites.

The Growing Hacking Threat to Websites, an Ongoing Commitment to Web Application Security from Frost & Sullivan

UPDATE (October, 15th of 2012): Video for this publication added: see it on our blog or on youtube.

High-Tech Bridge office photos

High-Tech Bridge slightly lifted the veil of secrecy, and now we can see photos of the new company office.

You can also find other photos of High-Tech Bridge's Office. High-Tech Bridge is located on World Trade Center II, Geneva.